> On Aug 1, 2018, at 9:31 AM, Michael Wojcik <Michael.Wojcik@xxxxxxxxxxxxxx> wrote: > > CMS with an AEAD mode (such as AES128-GCM) ought to avoid the integrity-protection issue for the encrypted content, but not for the other parts of the message, I assume. (I'm no CMS expert so I may be missing something there.) And, of course, both sender and recipient would have to support that algorithm. Not if you make it streaming. A streaming implementing will emit almost the entirety of the decrypted message before checking integrity at the end and finding out that some part of it (already output) was wrong. -- Viktor. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
